Risk register 


NO. Dateraised Opportunity/risk description (opportunities Type Theme Probability Impact (1 Overall Direction Proximity Strategic Actions required Owner Interested Last 
shaded in blue) (llow,5  low,5 high) priority (1 steering updated 
high) low, 25 groups / ET 
high 
1 01/04/17 The ICO fails to match resources to demand Internal/ Ops 5.0 4.0 Up T Shortterm Strategic Monitoring work loads and performance. ET: James Ops SG 24/07/18 
post GDPR implementation in key areas of ICO External Significant staff recruitment, including Dipple- 
operational work with a consequent adverse additional temporary staff, and continuing to Johnstone 
impact on regulatory outcomes and customer explore the use of technology to handle 
service. demand more efficiently. 
3 
4 28/06/17 ICO fails to meet expectations when dealing Internal/ Reputation : d Same <> Medium Strategic Relevant Director and Head of Department ET: James Ops/ Policy 13/07/18 
with priority files in a timely and effective way; External term recruited. Handling priority cases procedure in Dipple- SG 
and hence does not meet the wide range of place. ET has monthly oversight of cases. Johnstone 
expectations of stakeholders. 
5 
6 20/07/18 The ICO fails to match resources to demand Internal/ People 4.0 4.0 Same €> Shortterm Strategic Service recovery plan active and overseen by ET: Paul DCEO SG 20/07/18 
post GDPR implementation in key areas of ICO External DCEO and reported to Management Board Arnold 
customer contact work with a consequent 
adverse impact on customer service. 
8 13/07/18 We fail to get the right people into the right Internal People 3.0 4.0 Same <> Medium Strategic Resource and infrastructure strategic planin ET: Paul DCEO SG 20/07/17 
job, whether internal or external recruits; and term place, People Strategy being updated, Arnold 
as such are not as efficient and effective as we recruitment of additional senior OD staff 
should be. complete as well as wider workforce 
expansion, particular focus on addressing 
leadership/management capacity and 
capability. 
9 13/07/18 We fail to develop and train our staff (both Internal People 3.0 4.0 Same <> Medium Strategic In addition to technical training, management ET: Paul DCEO SG 20/07/17 
new and existing) as well as we could; and as term and leadership development programme Arnold 
such are not as efficient or effective as we underway and continually being developed. 
could be. First coaching programme completed in July. 
10 30/07/18 The relative unpredictability of spend on high Internal Finances 3.0 3.0 Same <> Medium Strategic Currently forcasting year end surplus position. ET: Paul DCEO SG 30/07/18 
profile investigations may lead to financial term Costs tracked on an ongoing basis and Arnold 
overspend. continuous dialogue with DCMS regarding the 
position re income and expenditure. 
12 05/06/17 The increase in size and complexity of the ICO, Internal Info Gov 3.0 3.0 Up T Medium Strategic Recruitment of a Group Manager for Strategic ET: Paul Comms SG 16/07/18 
the numbers of new staff who have joined the term Internal Communications and taking forward Arnold 
ICO recently, and poor records management the Knowledge Management Project. In 
practice mean that it is difficult for staff to find addition roll-out of SharePoint for EDRM. 


(or be provided with) the relevant corporate 
information that allows them to do their job. 
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Risk register 


30/07/18 


01/04/17 


Date raised Opportunity/risk description (opportunities Type 
shaded in blue) 
With a new funding model in place we fail to Internal 
collect sufficient income to meet our 
expenditure requirements 
Ability of the ICO to spot emerging Internal 
technological issues and to stay on top of them 
as they develop. 
The risk that day to day IT is not reliable or fit Internal 


01/04/17 


24/07/17 


05/05/17 


for purpose. 


An increasing number of regulators, some with External 
remits related to that of the ICO, results in a 
lack of clarity and reduced visibility of the ICO's 
role. 

That we do not have sufficient space to 
accommodate our expanding workforce. 


Internal 


Theme 


Finances 


Policy 


Reputation 


People 


Probability 
(1 low, 5 
high) 


2.0 


2.0 


3.0 


2.0 


Impact (1 


low, 5 high) 


4.0 


3.0 


2.0 


3.0 


2.0 


Overall 
priority (1 
low, 25 
high 


Direction 


Same <> 


Same <> 


Same <> 


Same <> 


Up T 


Proximity 


Medium 
term 


Short term 


Long term 


Medium 
term 


Medium 
term 


Strategic 


Strategic 


Strategic 


Strategic 


Strategic 


Strategic 


Actions required Owner 
Fee income expected to comfortably exceed ET: Paul 
original forcast. We continue to actively Arnold 


promote the need to pay fees and except to 

see further growth by year end. 

Technology Strategy developed and staff being ET: Steve 
recruited to the Technology team to fully staff Wood 
it. Once these are in place the risk would fall 

and could be tolerated. 

Performance of IT service reviewed weekly and ET: Paul 
monthly within department, and by DCEO Arnold 
steering group. Any problems or risks 

identified mitigated through project work and 

incident management. 


Ongoing liaison with DCMS, other government ET: 


departments and other regulators. Elizabeth 
Denham 
King's Court accommodation increased ET: Paul 


Wilmslow accommodation by 20-25%. London Arnold 
and Cardiff office also expanded. 


Interested 
steering 
groups / ET 


DCEO SG 


All SGs 


DCEO SG 


Ops/ Policy 
SG 


DCEO SG 


Last 


updated 


30/07/18 


13/07/18 


13/07/18 


16/04/18 


16/02/18 


